Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nTIumpO1_NnId77RRnM6czsPq6M.roa
File: nTIumpO1_NnId77RRnM6czsPq6M.roa (raw, json)
Hash identifier: MH3n71vpSHXcuF6seyOqAeIWkT/YJI1127SYg1WZT90=
Subject key identifier: 9D:32:2E:9A:93:B5:FC:D9:C8:77:BE:D1:46:73:3A:73:3B:0F:AB:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6EE6E073
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nTIumpO1_NnId77RRnM6czsPq6M.roa
Signing time: Wed 02 Mar 2022 01:08:40 +0000
ROA not before: Wed 02 Mar 2022 01:08:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860624499 (0x6ee6e073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 01:08:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d322e9a93b5fcd9c877bed146733a733b0faba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:d6:d9:52:b4:78:f0:41:05:82:3b:b6:ae:
13:b1:2d:3f:99:5e:42:45:00:cc:cb:9c:bf:e4:c2:
47:62:68:12:a0:34:45:b2:94:70:96:23:1a:b8:54:
79:e0:bc:98:56:5f:66:c5:08:4a:4b:d3:87:7c:90:
36:d5:c3:6a:25:a3:37:e8:13:3d:56:95:eb:f7:73:
ca:1f:3e:68:6b:93:e3:83:47:80:37:a0:48:1c:22:
f2:25:8e:52:62:64:ff:aa:9c:b2:79:f2:b6:08:12:
7e:47:fc:2e:10:ea:1c:3e:48:de:00:7b:f8:fa:da:
3e:0b:8f:2b:f5:a2:bd:d5:93:ee:b4:9d:8c:88:0b:
83:06:c6:39:51:9a:2d:15:f0:7c:cf:be:fd:5d:11:
bc:ba:a2:c6:5a:2e:e0:47:45:f2:de:b0:2c:dd:1f:
6d:36:57:b9:94:6b:5e:a6:f8:53:08:1e:f8:6e:20:
fc:72:cf:7e:6a:e2:75:f4:74:7e:4b:51:93:1a:af:
4d:a5:f1:37:a7:fb:b6:61:69:5b:13:90:25:12:83:
1b:81:7c:91:c5:36:2f:c1:fe:bc:64:ad:25:5d:09:
68:1e:e4:5a:c3:51:b9:79:10:59:f3:2c:be:57:3f:
09:5b:66:34:2e:a4:1d:d7:b8:cd:a3:ab:f1:cb:cf:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:2E:9A:93:B5:FC:D9:C8:77:BE:D1:46:73:3A:73:3B:0F:AB:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nTIumpO1_NnId77RRnM6czsPq6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:84:f5:a7:fb:04:12:e6:1d:ec:c6:61:f9:7b:86:fd:a1:62:
ef:3f:fc:3f:18:c7:bd:5c:58:8b:17:3d:e2:37:a8:ee:e9:a3:
c0:0b:66:56:8e:8b:02:41:15:fd:e5:84:99:68:6c:50:73:a7:
16:d8:89:a0:3d:97:08:b1:fb:27:27:6f:f7:2c:0b:97:07:ec:
4a:e0:52:0a:65:bc:73:86:2b:36:08:01:7b:86:cd:cb:80:2a:
ed:9f:08:1e:d7:8f:b2:61:19:aa:2d:44:15:85:f1:fd:aa:dd:
02:ea:54:f4:8d:64:48:23:28:65:1a:cf:31:0b:04:41:23:c8:
ca:ea:30:89:34:fd:dd:30:10:1d:35:da:9f:6d:f7:33:10:01:
a2:77:eb:c1:b8:78:82:84:ea:e1:e9:45:92:e2:53:d0:65:55:
34:d2:9d:84:89:0c:15:26:b9:8e:89:5e:3f:e4:4f:73:8e:eb:
4f:fe:61:57:d2:da:b3:82:ad:f1:5c:14:16:3b:31:9f:4b:23:
ed:c0:9d:36:09:5b:62:26:b4:37:4d:2e:99:9c:48:a5:c5:83:
05:0f:35:d0:0d:78:c4:ba:e6:aa:c8:2a:d4:ee:d2:df:f2:91:
92:e9:88:48:ec:57:c7:fc:31:d1:97:1f:f0:10:3b:eb:01:96:
41:d8:6a:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbubgczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
MjAxMDg0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWQzMjJlOWE5M2I1
ZmNkOWM4NzdiZWQxNDY3MzNhNzMzYjBmYWJhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmy1tlStHjwQQWCO7auE7EtP5leQkUAzMucv+TCR2JoEqA0
RbKUcJYjGrhUeeC8mFZfZsUISkvTh3yQNtXDaiWjN+gTPVaV6/dzyh8+aGuT44NH
gDegSBwi8iWOUmJk/6qcsnnytggSfkf8LhDqHD5I3gB7+PraPguPK/WivdWT7rSd
jIgLgwbGOVGaLRXwfM++/V0RvLqixlou4EdF8t6wLN0fbTZXuZRrXqb4Uwge+G4g
/HLPfmridfR0fktRkxqvTaXxN6f7tmFpWxOQJRKDG4F8kcU2L8H+vGStJV0JaB7k
WsNRuXkQWfMsvlc/CVtmNC6kHde4zaOr8cvPFZcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSdMi6ak7X82ch3vtFGczpzOw+rozAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L25USXVtcE8xX05uSWQ3N1JSbk02Y3pzUHE2TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCShPWn+wQS5h3sxmH5e4b9oWLvP/w/GMe9XFiL
Fz3iN6ju6aPAC2ZWjosCQRX95YSZaGxQc6cW2ImgPZcIsfsnJ2/3LAuXB+xK4FIK
Zbxzhis2CAF7hs3LgCrtnwge14+yYRmqLUQVhfH9qt0C6lT0jWRIIyhlGs8xCwRB
I8jK6jCJNP3dMBAdNdqfbfczEAGid+vBuHiChOrh6UWS4lPQZVU00p2EiQwVJrmO
iV4/5E9zjutP/mFX0tqzgq3xXBQWOzGfSyPtwJ02CVtiJrQ3TS6ZnEilxYMFDzXQ
DXjEuuaqyCrU7tLf8pGS6YhI7FfH/DHRlx/wEDvrAZZB2GrF
-----END CERTIFICATE-----
Generated at Fri May 2 06:05:47 2025 by rpki-client